Confidentiality and anonymity are often treated more or less synonymously.
5 There are, however, important distinctions that can be drawn between these two concepts, and the related notion of privacy. Confidentiality relates to what is done with information once it is in the researcher’s possession, and specifically the extent to which it is disclosed to others. Anonymity, in contrast, is concerned with the attribution of information—can individuals be identified from the data that they provide or from other information relating to them? The fact that some individuals might be concerned about the disclosure of certain information even if they saw no possibility of its being attributed to them—or conversely, that they might not wish their identity as a participant to be disclosed even if no other information relating to them were revealed—demonstrates that confidentiality and anonymity are not equivalent. Whilst confidentiality and anonymity refer to the
use and
attribution of information, respectively, privacy has to do with initial
access to information, and therefore comes into play before considerations of confidentiality and anonymity arise.
6
As regards data, an assurance can be provided these will be reported anonymously, but if data are declared confidential this would seem to preclude their being directly reported in the form of quotations. Assurances of confidentiality in relation specifically to data are not therefore meaningful (unless anonymity is simply re-expressed in terms of the confidentiality of any identifying information). In terms of information other than data, such as information about the context of the study or biographical details relating to participants, both anonymity and confidentiality are feasible, as such information may either be presented in a form that preserves anonymity, or may not be disclosed at all (particularly if any such disclosure would be hard without thereby breaching anonymity). An important relationship between confidentiality and anonymity is that confidentiality is of greatest concern if anonymity cannot be assured.
3.1 Deductive disclosure and internal confidentiality
An obvious way to preserve anonymity is to ensure that no real names or other directly identifying information are reported. However, individual participants may be identified by other, indirect means through what is referred to as deductive disclosure: ‘A narrative description of what an individual said to a researcher may, with a little collateral information, be sufficient to identify the individual [even] if no clear identifier, such as a name, is attached to the description’ (Boruch et al.
1996: p. 161). Thus, even if nobody is named, it may be possible to link seemingly innocuous pieces of information together and determine a participant’s identity, particularly in small and/or geographically circumscribed communities. A classic example of this is Carolyn Ellis’s (
1986) ethnographic study of two fishing villages in Chesapeake. Even though no directly identifying information had been used, it emerged that some participants in the study were able to identify themselves and others when the study was published (Ellis
1995). Two points about deductive disclosure bear emphasizing. First, the richer and more detailed the data reported, the greater the likelihood of deductive disclosure (Edwards and Weller
2016). Second, it may not be clear to the researcher, as an ‘outsider’, which information carries a risk of deductive disclosure; some reported details that appear to have no identifying potential may hold such meaning for others within the community or social group in which the research is centred.
In the context of focus groups, Tolich (
2009) draws a distinction between internal and external confidentiality. Whereas external confidentiality concerns the possible disclosure of information by the researcher, internal confidentiality has to do with information that might be disclosed by members of the group.
7 Clearly, external confidentiality can normally be assured by the researcher, as he or she is in control of what is reported from the study. Internal confidentiality relies on adherence to ground rules and observance of aspects of the consent process, over both of which the researcher has much more limited control.
It is often recommended that focus groups should be composed of individuals previously unknown to each other, so that pre-existing relationships, and certain assumptions or expectations that these involve, do not influence disclosure (Morgan
1997). This assists in preserving anonymity, but if participants are known to one another, their anonymity is clearly harder to maintain.
8 Additionally, the discussion within the group—and therefore what may be reported—may make reference to existing relationships or a shared history within the group, such that individuals may be recognized by others outside the focus group but within a broader social circle, through deductive disclosure. Bloor et al. (
2001: p. 25) suggest that the situation in which participants know one another may lead to a form of third-party breach of confidentiality, whereby a participant may ‘make reference to a personal view or experience of another group member that that individual does not feel comfortable divulging within that particular group setting.’ Kitzinger and Barbour (
1999: p. 17) provide an example of such ‘vicarious disclosure’ when noting that in one focus group a participant indicated that another woman had worked as a prostitute. In groups where individuals are already known to one another, information disclosed—and any subsequent failure to observe confidentiality in respect of such information—may have a negative effect on participants’ future relationships (Hofmeyer and Scott
2007).
A linked issue to internal confidentiality is that of over-disclosure. Within any form of interview, the rapport that is established between the informant and the researcher, and the efforts of the latter to encourage views or experiences to be expressed, may lead to an individual saying more than he or she might have wished or intended to. Within the specific context of a focus group, not only may the supportive atmosphere that can characterize the group encourage such over-disclosure (Bloor et al.
2001),
9 but the group setting may make it less reparable than in a one-to-one interview. In particular, it is much harder to ‘withdraw’ a comment in the public context of a focus group than in a one-to-one interview (Carey and Asbury
2012). Morgan (
1998: p. 91) suggests that over-disclosure may be more likely to occur in a focus group involving strangers—‘talking with someone you will never see again can lead to self-disclosure that goes beyond what you would tell your friends or family’—but also argues, in common with Frith (
2000), that the consequences of over-disclosure may be more acute in a focus group in which some or all participants are known to one another, owing to its potential influence on their future relationships. Through careful monitoring of the dialogue and interaction occurring within the group, the moderator can help to minimize the risk of over-disclosure.
The moderator can also minimize deductive disclosure, by omitting certain information about participants in a report, by attributing quotations to categories of participants rather than pseudonymized individuals, or by altering other information that is potentially identifying. In the process, however, the ability of the researcher to present, or the reader to infer, valuable insights from the data may be reduced. Kaiser (
2009: p. 1635) notes that ‘unlike changing a specific name, changing additional details to render data unidentifiable can alter or destroy the original meaning of the data.’ Moreover, if measures such as these are taken, it should not be automatically assumed that this is in accordance with participants’ wishes. Whilst they may want their identity to be protected when a study is reported, they may nonetheless disapprove of the use of pseudonyms or categories, such as ‘lone parent’, that might invite negative stereotypes (Corden and Sainsbury
2006). Moreover, the unwillingness of some participants to use pseudonyms or to be anonymous may be a means of retaining ‘ownership’ of the meaning of their contributions to the data (Richards and Schwartz
2002).
10 However, although acceding to a request not to use pseudonyms would respect the autonomous wishes of the individual(s) concerned, it might increase the likelihood of deductive disclosure in respect of other participants.
A further means by which anonymity can be protected is to eliminate written records of participants’ true identities. Thus, in a focus group study of relationships between gay and bisexual men in the context of HIV infection and AIDS, O’Brien (
1993) gained approval from an Institutional Review Board for the absence of signed consent forms.
11